$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: oiIDb4/mAexW3zoX8B1jCMHeudzM+aY56so0s/gvTuc= Subject key identifier: 50:A4:B3:2D:7A:59:E7:38:79:F8:55:A8:F5:51:08:39:DB:2A:A9:1A Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 0216 Signing time: Sat 09 Aug 2025 02:41:14 +0000 Manifest this update: Sat 09 Aug 2025 02:41:14 +0000 Manifest next update: Sat 16 Aug 2025 02:41:14 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: STkiAXYU51UDbiaAFaDqoJwKq8yqOnS6OjPGAR9IPr0=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Aug 9 02:41:14 2025 GMT Not After : Aug 16 02:41:14 2025 GMT Subject: CN=6896b54a-e8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:97:df:9b:b3:ce:98:dc:ed:46:aa:90:70: 55:3c:ba:a1:95:ed:a6:02:09:2f:ed:b1:af:07:b7: f7:a7:63:e3:17:f7:b8:ef:2e:6c:54:da:c1:2d:fe: c3:b6:ec:9f:42:18:0d:ca:c8:69:da:66:74:95:d9: 50:56:f5:c5:14:b1:d4:85:c1:b4:34:19:df:6e:9e: 53:f8:f6:01:22:07:05:dd:f2:c7:35:66:d0:50:47: 78:e0:d9:5e:92:ce:b5:a5:5f:0f:40:4a:10:d6:73: 9a:3c:cc:c4:02:22:eb:ae:77:b7:84:8b:aa:86:c9: e9:16:03:28:3c:78:5a:f9:de:39:ad:e1:44:ea:50: a7:a4:8a:34:73:db:3d:54:ce:58:0a:92:1a:22:16: b2:8e:d5:68:9c:c6:44:63:67:04:e1:47:84:ce:bd: 8f:74:66:5d:72:c0:ef:06:4e:dd:0f:b9:f1:20:b6: d9:0c:0b:71:f5:c7:13:9f:cd:b1:d5:2d:f0:2d:66: 9e:2f:31:cc:ad:78:77:b8:47:59:8f:19:50:1a:84: a9:4a:1b:56:e2:f9:3e:d3:c8:8b:33:f4:af:6a:c9: b7:60:86:90:89:9e:9b:2c:9b:a4:70:46:61:f3:4f: 35:03:9b:5c:79:9c:0e:47:8e:e0:1c:20:74:61:20: 54:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A4:B3:2D:7A:59:E7:38:79:F8:55:A8:F5:51:08:39:DB:2A:A9:1A X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4e:63:a5:fd:50:34:03:f1:bc:f8:3d:ef:4d:b2:47:b4:6e: 63:19:e4:d4:28:94:58:e8:63:4e:8f:2d:82:91:32:73:de:59: b5:ec:03:58:f7:94:b4:70:31:8b:7c:5b:b3:27:43:b7:6a:df: 27:24:9f:1a:1a:54:d3:ab:20:13:34:89:4a:5e:b8:8e:2d:49: 0f:76:d3:e1:31:3e:6f:75:0e:c6:a7:54:db:51:e4:ae:90:ff: bf:9e:cf:7d:5a:a5:8b:02:b3:f8:80:18:8c:6a:e8:39:91:ff: 76:07:33:7e:c0:f4:83:a6:9c:22:1a:77:ad:09:89:bc:56:bd: 36:da:4a:da:f0:bc:12:82:f7:b6:89:93:7f:a1:a8:5d:74:54: 29:b0:11:92:90:14:f5:9c:af:fc:26:e5:02:c5:01:72:74:48: 75:aa:fa:95:de:32:e8:0d:04:d5:58:26:cd:01:15:d4:89:8e: 1b:c6:5a:1d:6e:5f:d7:83:42:9a:4a:55:e3:7a:2a:cd:d6:da: 1c:dc:97:b2:ef:e9:98:bb:ff:2c:8e:c2:46:72:03:96:51:62: 15:1b:96:79:df:6b:af:d7:fa:cb:2d:1a:5f:fd:d4:09:c3:78: ce:10:9b:42:aa:a4:cc:36:d6:ae:28:62:45:27:48:cd:2e:04: e8:a4:ff:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUwODA5MDI0MTE0WhcNMjUwODE2MDI0MTE0WjAYMRYwFAYD VQQDEw02ODk2YjU0YS1lOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuleX35uzzpjc7UaqkHBVPLqhle2mAgkv7bGvB7f3p2PjF/e47y5sVNrBLf7D tuyfQhgNyshp2mZ0ldlQVvXFFLHUhcG0NBnfbp5T+PYBIgcF3fLHNWbQUEd44Nle ks61pV8PQEoQ1nOaPMzEAiLrrne3hIuqhsnpFgMoPHha+d45reFE6lCnpIo0c9s9 VM5YCpIaIhayjtVonMZEY2cE4UeEzr2PdGZdcsDvBk7dD7nxILbZDAtx9ccTn82x 1S3wLWaeLzHMrXh3uEdZjxlQGoSpShtW4vk+08iLM/Svasm3YIaQiZ6bLJukcEZh 8081A5tceZwOR47gHCB0YSBUUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCksy16 Wec4efhVqPVRCDnbKqkaMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMTmOl/VA0A/G8+D3vTbJHtG5jGeTUKJRY6GNOjy2CkTJz3lm17ANY 95S0cDGLfFuzJ0O3at8nJJ8aGlTTqyATNIlKXriOLUkPdtPhMT5vdQ7Gp1TbUeSu kP+/ns99WqWLArP4gBiMaug5kf92BzN+wPSDppwiGnetCYm8Vr022kra8LwSgve2 iZN/oahddFQpsBGSkBT1nK/8JuUCxQFydEh1qvqV3jLoDQTVWCbNARXUiY4bxlod bl/Xg0KaSlXjeirN1toc3Jey7+mYu/8sjsJGcgOWUWIVG5Z532uv1/rLLRpf/dQJ w3jOEJtCqqTMNtauKGJFJ0jNLgTopP9z -----END CERTIFICATE-----Generated at Sat Aug 9 15:08:46 2025 by rpki-client